moshu-cdp
Warn
Audited by Socket on Aug 30, 2026
1 alert found:
AnomalyAnomalyscripts/setup-cdp-chrome.js
LOWAnomalyLOW
scripts/setup-cdp-chrome.js
No direct evidence of classic sabotage/malware (no external C2, no eval/obfuscation, no obvious data exfiltration) is present in this module. However, the code performs high-risk actions: it kills existing Chrome processes and copies sensitive authentication data (Cookies/Login Data/Web Data) into a new debug profile, then launches Chrome with an exposed local CDP port. That combination is powerful and could enable credential theft if this module is part of a larger malicious workflow. Based on this single file, treat it as a high-sensitivity automation/setup script and review surrounding project usage for any reading/exfiltration of the debug profile or CDP session data.
Confidence: 68%Severity: 62%
Audit Metadata